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rence, up to $25,000 per calendar 
year. Congress has also granted 
the DHHS the power to alert the 
Justice Department for criminal 
prosecution that could result in 
criminal penalties up to $50,000, 
and/or up to 1 year in jail. A crimi- 
nal violation can include wrongful 
disclosure of individually identifi- 
able health information. In the 
event such wrongful disclosure is 
made under false pretenses, crimi- 
nal penalties of imprisonment up 
to 5 years and fines up to $100,000 
could result. Finally, criminal 
penalties of up to $250,000 and up 
to 10 years in prison can result for 
obtaining or disclosing private 
health information with the intent 
to sell for personal gain, commer- 
cial advantage, or malicious harm 
(42 USC §§ 1320d-5, 1320d-6, 2002). 


Conclusion 

While most, if not all, health 
care professionals will likely be 
affected by HIPAA’s Privacy Rules, 
they should remember that the 
purpose is to uphold and protect 
the right to privacy afforded by the 
First Amendment of the 
Constitution. Although the Privacy 
Rules will undoubtedly restrict a 
covered entity’s uses and disclo- 
sures of PHI, limitations are all in 
the name of protecting privacy of 
individuals. After all, 85% of con- 
sumers feel privacy of medical 
information is absolutely essential. 
HIPPA’s Privacy Rules is the tool to 
ensure those privacies. 
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